In an organization, there are many potential security threats from both inside and outside of the network.

Authentication, Authorization, Accounting

Having security policies and procedures that document and manage access to critical data and technology is one thing, but actually controlling the access is another. Describe and evaluate how authentication controls can enforce security policies within an organization.

Operational Security

What are some operational security considerations that you, as a security professional, need to contend with? What security policies and procedures can help protect your business operations?

This discussion is divided into two fundamental topics - AAA and OpSec. Please make an original post about each category.